Is CVE-2021-3456 actively exploited?

No active exploitation of CVE-2021-3456 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-3456 be exploited remotely?

No. CVE-2021-3456 requires local access to exploit.

What is the CVSS score of CVE-2021-3456?

CVE-2021-3456 has a CVSS score of 7.1 (HIGH).

HOME VULNERABILITIESCVE-2021-3456

HIGH

CVE-2021-3456

CWE-863Published: March 30, 2022· Updated: Jun 17, 2026

7.1

CVSS v3.1

Official Description

An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.

NVD Source

Technical Analysis

CVE-2021-3456 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.1.